Electronic File Encryption via Terminal Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current electronic prescription systems lack adequate security measures to protect private user information, making it susceptible to malicious attacks and theft, especially in internet-based transactions.
Innovation Solution
An encryption method where a terminal device generates a first encryption key based on user login information and an identifier, which is used to create a second encryption key for encrypting electronic files, allowing the terminal device to decrypt the files without needing key exchange with the information providing server, thereby enhancing security and user experience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If electronic prescriptions are stored and transmitted on internet-based platforms, then convenience of access and query is improved, but security of private user information deteriorates due to susceptibility to malicious attacks and theft
Solution Approach 1:
The encryption key is segmented into multiple components: user login information (username and password) and platform identifier. This segmentation allows the key to be generated distributively without requiring complete key exchange between parties, thus improving security while maintaining accessibility.
Solution Approach 2:
The terminal device autonomously generates the encryption key using local user login information and the platform identifier, without requiring key exchange with the information providing server. This self-service approach eliminates a vulnerable key exchange step while enabling secure access.
2Reliability
If traditional encryption methods with key exchange are used, then security of data transmission is improved, but complexity of key management and user operation deteriorates
Solution Approach 1:
The terminal device automatically generates the encryption key using locally stored user login information and the platform identifier, eliminating the need for manual key exchange or complex key management protocols. This reduces operational complexity while maintaining security.
Solution Approach 2:
The same user login information (username and password) serves dual purposes: both for platform authentication and for generating the encryption key. This multi-functionality reduces the number of separate key management steps required.
3Ease of operation
If user login information is used to generate encryption keys, then key management simplicity is improved, but risk of information leakage deteriorates if platform server is compromised
Solution Approach 1:
The critical user credentials (username and password) are extracted and used solely for encryption key generation on the terminal device, rather than being stored or transmitted to the platform server. This separation removes the vulnerability of credential storage from the system.
Solution Approach 2:
The platform identifier acts as an intermediary element that connects the user's credentials to the specific platform without requiring the platform server to know or store the user's login information. This intermediary enables secure platform-specific encryption without centralizing sensitive data.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The disclosure provides a method and an apparatus for acquiring an electronic file. The method for acquiring an electronic file includes: generating a first encryption key according to login information of a user of a terminal device at the time of logging in to a platform server and a first identifier corresponding to an information providing server that provides the electronic file; sending a first request message for acquiring the electronic file to the platform server; receiving the electronic file encrypted using a second encryption key and returned by the platform server according to the login information and the first request message; and generating a first decryption key according to the first encryption key, and decrypting, using the first decryption key, the electronic file encrypted using the second encryption key, so as to obtain the decrypted electronic file. By means of the disclosed embodiments, private information concerning a user in an electronic file is not leaked by a platform server. Since a terminal device can obtain a decryption key without the need to perform key exchange with an information providing server, use by the user of the terminal device is facilitated.